Collaborate Disseminate
The first one of today’s never ending series of Locky downloaders is an email with the subject of Tax invoice coming as usual from random companies, names and email addresses with a random named/numbered zip attachment containing 2 identical .WSF files … Continue reading →
The next in the never ending series of Locky downloaders is an email with the subject of Documents Requested or FW:Documents Requested pretending to come from a random name at your own email domain or company with a zip file … Continue reading →
The next in the never ending series of Locky downloaders is an email with the subject of Order Confirmation 9226435 [random number]coming as usual from random companies, names and email addresses with a random named zip attachment containing an HTA … Continue reading →
Continue reading Order Confirmation nnnnnn malspam with a dzip attachment delivers Locky
This was forwarded to me by a contact, that was received on a private mailing list, so I have removed all personally identifiable information for privacy & security reasons. We frequently see similar emails being used in phishing scams. I don’t … Continue reading →
Continue reading Microsoft account Unusual sign-in activity malspam using JSE files delivers Locky
An email with the subject of Lloyds Banking Group encrypted email pretending to come from GRP Lloydsbank Tech <info@lloydsbanking52.us> with a malicious word doc or Excel XLS spreadsheet attachment is another one from the current bot runs which try to download … Continue reading →
Continue reading Lloyds Banking Group encrypted email malspam delivers malware
The next in the never ending series of Locky downloaders is an email with the subject of Agreement form coming as usual from random companies, names and email addresses with a random named zip attachment containing 2 identical .JS files … Continue reading →
Late last night a contact posted several comments about a new malware on THIS post. When I got up this morning, I checked my mail server quarantine and found about 100 copies of same email starting at about 21.30 UTC … Continue reading →
Continue reading free sports player / splayer malspam delivers malware via hta files
An email with the subject of Invoice 00014904; From CHALICE GOLD MINES LIMITED [ random numbered] pretending to come from CHALICE GOLD MINES LIMITED <AccountRight@appsmyob.com> with a link in the email body to download a zip file containing a .JS file. The … Continue reading →
Continue reading Invoice 00014904; From CHALICE GOLD MINES LIMITED delivers digitally signed malware
The next in the never ending series of Locky downloaders is an email with the subject of Suspected Purchases coming as usual from random companies, names and email addresses with a random named zip attachment containing 2 identical .JS files … Continue reading →
Another one in the multitude of daily phishing emails trying to steal your PayPal account. This one is worth mentioning because of the bad spelling and grammar that proves this does not come from an English speaking criminal The original … Continue reading →